WO2020169505A1

WO2020169505A1 - System for trusted distance measurement

Info

Publication number: WO2020169505A1
Application number: PCT/EP2020/054029
Authority: WO
Inventors: Johannes Arnoldus Cornelis Bernsen
Original assignee: Koninklijke Philips N.V.
Priority date: 2019-02-19
Filing date: 2020-02-17
Publication date: 2020-08-27
Also published as: EP3928534A1; EP3700234A1; CN113455019A; US20220256350A1; BR112021016443A2; US12089052B2; JP7500587B2; JP2022520865A; KR20210127228A; CN113455019B

Abstract

A device is arranged for distance measurement according to a ranging protocol using a measurement message from a second device. Based on a first arrival time of the measurement message a first distance (151) between the first device (110) and the second device (120) is determined. A third device (130) acts as a cooperating device that is located at a trusted distance (150). The cooperating device determines a third arrival time of the same measurement message, and transfers support data to the first device, the support data being based on the third arrival time. The first device obtains a third distance (153) between the third device and the second device using the support data. Then a verification test is performed on the first distance (151), the trusted distance (150) and the third distance (153). The first distance is reliable when said distances correspond to a viable spatial constellation (100) of the devices.

Description

System for trusted distance measurement

FIELD OF THE INVENTION

The invention relates to a device for distance measurement via wireless communication between the device acting as a first device and a second device for wireless communication, the wireless communication comprising a ranging protocol for determining a distance between the first and the second device based on an arrival time of a measurement message at the first device, the protocol comprising transmitting the measurement message by the second device. The invention further relates to a method for distance measurement and computer program products for use in a device or server.

The present invention relates generally to the field of location systems, and more in particular provides various devices and methods for verifying distance measurements as well as corresponding computer program products.

BACKGROUND OF THE INVENTION

A need for location aware services may exist in indoor areas. For example in large indoor complexes, such as hospitals, universities, parking lots, shopping malls, and/or offices, wireless services may be provided to mobile devices at close distance. An indoor location system may provide a service to consumers (hereafter end-users); a service that end- users will eventually rely on. Such location based services may be provided only to devices that are close by, i.e. at a limited distance to the service providing device. In a further example, an electronic, wireless car door key must be close to the car before it should be able to open the door. A cheating door key may tamper with the distance measurement protocol such that it can open the door when it is much further from the car than it should be.

It is therefore important that the distance measurement is reliable. Reliable in this context means that a responding device provides reliable and correct distance or arrival data as measured, as opposed to distance or arrival time data that has been tampered with or that have been faked to intentionally cause a distance different from the real distance to the responding device.

A known system for distance measurement is recently developed in a version of the protocol for wireless communication defined in IEEE 802.11, see reference document [802.11] The version comprises a ranging protocol for determining a distance between two devices, and allows for accurate distance measurement and determining location of devices up to 1 meter or even lower resolution. The ranging protocol, called Fine Timing

Measurement procedure (FTM), is defined in [802.11] Chapter 10.24.6, and accurately measures arrival times of measurement messages to determine a Round-Trip Time (RTT) of the signal, and derives the distance based on the measured arrival times of the messages in combination with the transmission timing. For example, assuming a wireless signal propagated in free air with substantially the speed of light, it takes 3.3 ns for the radiation to cover a distance of a meter while a Wi-Fi station may be able to reach a time granularity of around 0.1ns.

Note that this application is in the field of ranging protocols. These may correspond to what is known as time-of-flight measurements which measure the time it takes for the electromagnetic radiation to travel between the transmitter and the receiver. They are fundamentally different than the distance measurement as performed in IP/HTTP protocol, a.k.a. ping times, which measure the time it takes for an IP data packet to transit in a network from a source device to a sink device, wherein such transit may include a number of intermediate devices.

In order for two devices to determine the distance between each other based on arrival time measurements, they need to operate according to a ranging protocol. For example, an initiating wireless device may initiate a request to start a round trip time measurement. A responding device may determine an interval between sending a message and receiving the request, and send the time interval to the initiating device.

However, by sending false data a device can actually claim it is closer or further away than it is in reality. Also, a measurement message may have to be transmitted at a predetermined time, e.g. according to a timing grid. A malicious device may intentionally send the measurement message at a different time. Such malicious behavior could lead to possible abuse of a location based service if an initiating device trusts determined distance/location information to be accurate. For example a location based service may automatically start some transaction.

So, in the known systems the measurements or the received distance data may be tampered with and therefore cannot be fully trusted. SUMMARY OF THE INVENTION

A first device that measures the distance to a second device using the Time Measurement (TM) or Fine Time Measurement (FTM) methods of 802.11 may try to protect itself against fake time of arrival (TOA) and fake time of departure (TOD) data by malicious devices that in doing so want to appear at a different, especially smaller distance than they really are.

To counter such behavior a distance measurement system may involve a third device, that also performs a distance measurement to determine a second distance between the third device and the second, potentially malicious, device. By comparing both distances and knowing, and trusting, the distance between the first device and the cooperating device, a verification test may be performed on both determined distances. However, although it may be more complicated for the malicious device to tamper with both distance measurements so that they pass the verification test, it may still be possible.

It is an object of the invention to provide a system for making arrival time based distance measurement more trustworthy. For this purpose devices and methods are provided as defined in the appended claims.

According to a first aspect of the invention there is provided a device for distance measurement via wireless communication between the device acting as a first device and a second device for wireless communication, the wireless communication comprising a ranging protocol for determining a distance between the first and the second device based on an arrival time of a measurement message at the first device, the protocol comprising transmitting the measurement message by the second device;

the device comprising

- a first transceiver for transmitting and receiving of messages,

- a first message processor arranged for

- processing the messages according to the ranging protocol;

- determining a first arrival time of the measurement message at the first device, and

- determining a first distance between the first device and the second device based on the first arrival time;

wherein the first message processor is arranged for communicating with a third device, the third device acting as a cooperating device being located at a trusted distance from the first device,

and is arranged, for assessing the determined distance, - receiving the support data from the cooperating device, the support data being based on a third arrival time of the first message at the cooperating device,

- obtaining a third distance between the third device and the second device using the support data,

- performing a verification test on the first distance, the trusted distance and the third distance, the verification test accepting the first distance as reliable when said distances correspond to a viable spatial constellation of the first device, the second device and the cooperating device.

According to a further aspect there is provided a method for distance measurement via wireless communication between a first device and a second device, the method comprising

- obtaining a first distance between the first device and the second device based on a first arrival time of the measurement message at the first device,

- communicating with a third device, the third device acting as a cooperating device being located at a trusted distance from the first device,

the third device being arranged for

- determining a third arrival time of the measurement message at the third device, and

- providing support data, the support data being based on the third arrival time;

the method comprising, for assessing the determined distance,

According to a further aspect there is provided a method for acting as a cooperating device in a distance measurement via wireless communication between a first device and a second device, the cooperating device being located at a trusted distance from the first device. The wireless communication comprises a ranging protocol for determining a distance between the first and the second device based on an arrival time of a measurement message at the first device, the protocol comprising transmitting the measurement message by the second device. The first device is arranged for obtaining a first distance between the first device and the second device based on a first arrival time of the measurement message at the first device. The method comprises - determining a third arrival time of the measurement message at the cooperating device, and

- providing support data, the support data being based on the third arrival time. The first device is arranged, for assessing the determined distance, to obtain a third distance between the cooperating device and the second device using the support data, and to perform a verification test on the first distance, the trusted distance and the third distance, the verification test accepting the first distance as reliable when said distances correspond to a viable spatial constellation of the first device, the second device and the cooperating device.

The above features have the effect that when the second device participates in a ranging protocol, the first device may determine the distance according to the ranging protocol based on the first arrival time of the measurement message as transmitted by the second device. In addition, the third device determines a third arrival time of the same measurement message at the third device. The third device is located at a distance from the first device, which distance is known to the first device and trusted to be reliable. Such a distance is called a trusted distance in this document. The trusted distance may be predetermined, or may be measured separately or may be entered by a user. Such a third device may be called a cooperating device in this document.

Note that the third device, acting as a cooperating device, does not perform a further distance measurement according to the ranging protocol using some further measurement messages. Instead, the third device cooperates to determine a third arrival time of said same measurement message at the third device, and to transfer support data to the first device, the support data being based on the third arrival time. For example, the support data may comprise third arrival time data relative to a reference clock or timing grid, or relative to receiving some other message also received by the first device. Alternatively or additionally the support data may comprise third distance data, the third device being able to determine a third distance between the third device and the second device by using further received messages and the trusted distance.

Upon receiving the support data, a processor is enabled to obtain the third distance between the third device and the second device using the support data.

Subsequently, a verification test is performed on the first distance, the trusted distance and the third distance. Advantageously, the verification test may accept the first distance as reliable when said distances correspond to a viable spatial constellation of the first device, the second device and the cooperating device. In an embodiment, the verification test comprises a cosine rule check or a triangle inequality check on the viable spatial constellation. Advantageously, the check proves whether a spatial constellation of a triangle may have the respective lengths of the sides.

In an embodiment, the ranging protocol comprises exchanging messages that are cryptographically protected based on key data, and the first message processor is arranged to share the key data with the cooperating device to enable the third message processor to cryptographically process the messages according to the ranging protocol. Advantageously, encrypting messages between the first and the third device protects such messages being tampered with by the, potentially malicious, second device.

In an embodiment, the first message processor is arranged to determine the trusted distance according to the ranging protocol. Advantageously, preceding the actual measurements to the second device, the trusted distance is determined using the same ranging protocol.

In an embodiment, the device comprises a clock unit to provide a time reference for determining said arrival times, and the first message processor is arranged to synchronize the time reference with a corresponding clock unit in the cooperating device. Advantageously, the time reference is shared between the first and the third device. The third arrival time may be determined relative to the time reference, which enables the support data to comprise the third arrival time so determined, and being usable as such by the first device.

In an embodiment, the ranging protocol comprises the first device, acting as an initiating device, sending an initiating message to the second device, while, upon receiving the initiating message, the second device has to send the measurement message. The first message processor is arranged to exchange role-change data with the third device to enable the third device to act as the initiating device for a distance measurement. The third device is arranged, upon receiving the role-change data,

- to obtain a third distance between the third device and the second device according to the ranging protocol based on a second measurement message, and

- to transfer third support data to the first device, the third support data being indicative of the third distance. The first message processor is arranged

- to determine a second distance between the first device and the second device when receiving the second measurement message at the first device,

- to receive, from the third device, the third support data, and

- to perform the verification test also using the second distance and the third support data. Advantageously, by determining said second distance and verifying both distances in combination, it is more difficult for the second device to consistently tamper with both distance measurements.

In an embodiment, the third message processor is arranged to determine a third signal strength of at least one message received from the second device, and including third signal strength data in the support data to the first device. The first message processor is arranged to determine a first signal strength of at least one message received from the second device, and to verify whether the determined distances are reliable by comparing the first signal strength and the third signal strength to respective expected signal strengths at the determined distances. Optionally, both the first device and the third device may measure the signal strength of the same message from the second device. Advantageously, a further, independent mechanism is added that enables verification of the determined distances.

In an embodiment, the first message processor is arranged, upon assessing that the determined distance is not reliable, to require executing a different security protocol with the second device. Advantageously, alternatively or additionally, the first message processor is arranged, upon assessing that the determined distance is not reliable, to request a further distance measurement using a different ranging protocol and/or a different type of wireless communication. Alternatively, or additionally, the first message processor is arranged, upon assessing that the determined distance is not reliable, to deny or restrict access to at least some data and/or to at least one function in the first device. Advantageously, malicious access to, or use of, any function or data in the first device is prevented.

According to a further aspect of the invention, a system for reliable distance measurement comprises the device and the third device as described above, and a fourth device acting as a second cooperating device being located at a second trusted distance from the first device and being located at a third trusted distance from the third device. The fourth device comprises a fourth wireless receiver for receiving of messages,

a fourth message processor arranged for determining a fourth arrival time of the measurement message at the fourth device, and transferring fourth support data to the first device, the fourth support data being based on the fourth arrival time. The first message processor is arranged for receiving the fourth support data from the second cooperating device, obtaining a fourth distance between the fourth device and the second device using the fourth support data, and to perform the verification test using the second trusted distance and the fourth distance. Advantageously, by determining said further distance and verifying all distances in combination, it is more difficult for the second device to consistently manipulate said distances.

Optionally, the verification test may use a combination of a triangle inequalities on at least two spatial constellations, each constellation comprising the second device and two devices of the set of the first device and the cooperating devices. Optionally, the first message processor may be arranged to verify whether a first location of the second device according to the first spatial constellation corresponds to a second location of the second device according to the second spatial constellation.

Optionally, the first message processor may be arranged to perform the verification test using an inconsistency check for detecting whether all of the determined distances are larger than zero

Optionally, the first message processor may be arranged to perform the verification test based on a setup wherein the third device and the fourth device are arranged so that a trusted angle between a line from third device to first device and a line from fourth device to first device is at least 90 degrees.

Optionally, the first message processor may be arranged to perform the verification test based on a setup wherein the third device and the fourth device are arranged opposite to each other with respect to the first device.

Optionally, the first message processor may be arranged to perform the verification test based on a setup wherein the second trusted distance corresponds to the trusted distance.

In an embodiment, the system comprises at least one further device acting as a further cooperating device, wherein the third device, the fourth device and the at least one further device are arranged in a plane at the edges of a polygon, the first device being inside the polygon, wherein the first message processor is arranged

- to perform the verification test using a combination of a triangle inequalities on at least two spatial constellations, each constellation comprising the second device and two devices of the set of the first device and the cooperating devices. Advantageously, by determining said further distance and verifying all distances in combination, it is more difficult for the second device to consistently manipulate said distances.

In an embodiment, the method comprises instructing the first device to act as an initiating device to provide the first arrival time or the first distance. Alternatively, or additionally, the method comprises instructing the third device to act as the cooperating device to provide the support data being based on the third arrival time. Effectively, control of the distance measurement is now performed by said instructing.

It is noted that in the above, for clarity reasons, it has been described as the first device performing the distance measurement and distance reliability verification.

However, it is also possible that the first device, the third device and/or further cooperating devices provide all required information to a control device which performs the distance measurement and distance reliability verification.

A method according to the invention may be implemented on a computer as a computer implemented method, or in dedicated hardware, or in a combination of both.

Executable code for a method according to the invention may be stored on a computer program product. Examples of computer program products include memory devices such as a memory stick, optical storage devices such as an optical disc, integrated circuits, servers, online software, etc. The computer program product may comprise non-transitory program code means stored on a computer readable medium for performing a method according to the invention when said program product is executed on a computer. In an embodiment, the computer program comprises computer program code means adapted to perform all the steps or stages of a method according to the invention when the computer program is run on a computer. Preferably, the computer program is embodied on a computer readable medium. There is provided a computer program product downloadable from a network and/or stored on a computer-readable medium and/or microprocessor-executable medium, the product comprising program code instructions for implementing a method as described above when executed on a computer.

Another aspect of the invention provides a method of making the computer program available for downloading, for example included in a location based application.

This aspect is used when the computer program is uploaded into, e.g., Apple’s App Store, Google’s Play Store, or Microsoft’s Windows Store, and when the computer program is available for downloading from such a store.

Further preferred embodiments of the devices and methods according to the invention are given in the appended claims, disclosure of which is incorporated herein by reference.

BRIEF DESCRIPTION OF THE DRAWINGS These and other aspects of the invention will be apparent from and elucidated further with reference to the embodiments described by way of example in the following description and with reference to the accompanying drawings, in which

Figure 1 shows devices for wireless communication and distance measurement,

Figure 2 shows a spatial constellation of a device for wireless communication and a cooperating device

Figure 3 shows a spatial constellation of two devices for wireless communication,

Figure 4 shows a further spatial constellation of two devices for wireless communication,

Figure 5 shows a spatial constellation having two cooperating devices,

Figure 6 shows a second spatial constellation having two cooperating devices, Figure 7 shows a further spatial constellation having two cooperating devices, Figure 8 shows a method for distance measurement,

Figure 9 shows a method for acting as a cooperating device in a distance measurement,

Figure 10a shows a computer readable medium, and

Figure 10b shows in a schematic representation of a processor system.

The figures are purely diagrammatic and not drawn to scale. In the Figures, elements which correspond to elements already described may have the same reference numerals.

DETAILED DESCRIPTION OF EMBODIMENTS

The distance measurement methods and devices using wireless communication as described below provide at least a basic function, i.e. providing information on the current distance between a mobile device to another device, e.g. on a fixed position. Various protocols are now described as examples of suitable ranging protocols using arrival times of measurement messages, which may be enhanced using the

embodiments described thereafter.

A first example of distance measurement is described in [802.11] Clause 11.24.6 specifies the fine timing measurement (FTM) procedure. The FTM mechanism is intended for measuring the difference in absolute time between the clocks in two devices, such that one also can compensate for the time it takes for RF waves to travel from one device to the other with the speed of light. In the FTM procedure, one of the devices sends time stamps of its clock to the other in such a way that the other device can measure the round-trip time (RTT) between the two (explained later). Distance measurement between two devices using 802.11 (Wi-Fi) is done by measuring the round-trip time (RTT) using the fine timing measurement (FTM) procedure specified in clause 11.24.6 of [802.11], multiplying the RTT by the speed of light and dividing by 2.

The following is an explanation of FTM in [802.11], see e.g. figures 11-35, 11-36, 11-37 and surrounding text. The numbering of the time stamps below is from figure 11-36. An Initiating STA (station) wants to know the RTT or distance to another STA, the Responding STA. To accomplish this, the Initiating STA sends an Initial FTM Request to the Responding STA. The Responding STA sends an FTM_1(0, 0) message to the Initiating STA and measures the exact time of transmission. The Responding STA stores this time as ti l . The Initiating STA measures the reception of the FTM_1(0, 0) message as t2_l. It measures the transmission time of the resulting ACK as t3_l. However, the Initiating STA cannot use the values t2_l and t3_l just yet.

The Responding STA measures the reception time of the ACK received as the response to FTM_1(0, 0) and stores this as t4_l. After a while (at least Min Delta FTM seconds), the Responding STA transmits FTM_2(tl_l, t4_l) and notes the time of transmission as tl_2. This Initiating STA goes through the same routine as described above, i.e. measuring the reception time of FTM_2(tl_l, t4_l) as t2_2 and the transmission time of the ACK as t3_2. However, this time, the Initiating STA is able to measure an RTT according to the following equation (11-5) from [802.11]

RTT = [ (t4 1 - tl_l) - (t3 1 - t2 1 ) ] (1)

Rearranging the right hand side of the formula above yields

RTT = (t2 _ 1 - ti l) + (t4 _ 1 - 13 _ 1 ) (2) from which it can easily be seen that (t2_l - ti l) is the time for the FTM frame to travel over the RF medium from Requesting STA to the Initiating STA while transferring the FTM frame and that (t4_l - t3_l) is the time for the ACK frame to travel over the RF medium from the Initiating STA to the Responding STA, so that their sum is indeed the round-trip time.

In order to increase the accuracy, the above can be repeated and the RTT can be computed as the average of all the measurements.

tl_X is a Time Of Departure (TOD). The TOD is defined in [802.11] as "The TOD [... ] represents the time, with respect to a time base, at which the start of the preamble of the last transmitted Fine Timing Measurement frame appeared at the transmit antenna connector." The preamble is the very first part of a PHY frame, which among other things means that a transmitter does not transmit any RF energy just before the preamble. Therefore, the Initiating STA must measure t3_X in the same way, i.e. t3_X represents the time, with respect to a time base, at which the start of the preamble of the last transmitted ACK frame as a response to a received Fine Timing Measurement frame appeared at the transmit antenna connector.

t4_x is a Time Of Arrival. The TOA is defined in [802.11] as "The TOA [... ] represents the time, with respect to a time base, at which the start of the preamble of the Ack frame to the last transmitted Fine Timing Measurement frame arrived at the receive antenna connector." Therefore, the Initiating STA must measure t2_X in the same way, i.e. t2_X represents the time, with respect to a time base, at which the start of the preamble of the last received Fine Timing Measurement frame arrived at the receive antenna connector.

Therefore, the minimum time t3 - t2 is equal to the length of the received FTM( , ) frame + SIFS and the maximum time t3 - 12 is equal to the length of the received FTM( , ) frame + DIFS. The length of FTM( , ) frames may vary. In the rest of this document, we use the following definitions:

- use Lftm to denote the length in time of the physical FTM frame that resulted in the Initiating STA to measure t2 and t3;

- use the term reaction time or reaction time of the Initiating STA and the symbol R as the time the Initiating STA takes from just after the last symbol of the physical FTM frame (i.e. the last symbol of the CRC check) arrived at its receive antenna connector to the TOD of the ACK frame it sent in response to the FTM frame. Since sending an ACK frame is a rather simple action it is likely done in hardware and may therefore be constant.

Clause 11.24.5 of [802.11] specifies the timing measurement (TM) procedure. There are some differences from the FTM procedure, the most notable one is the better resolution of the time stamps, which in principle allow for a more precise distance measurement. The embodiments below may be used in the same way for TM as described here for FTM.

A further example of a distance measurement system similar to FTM is described in US8762727B2. The difference is that the Initiator STA is called the source node, the Responder STA is called the target node and that the source node measures tl and t4 and the target node measures t2 and t3 and sends these to the source node. Further example of a distance measurement system is described in 3GPP, called OTDOA (Observed Time Difference Of Arrival), see [OTDOA], which is a positioning feature introduced in rel9 E-UTRA (LTE radio), see references [36.nnn] as elucidated below. It is a multilateration method in which the User Equipment (UE) measures the time difference between some specific signals, Positioning Reference Signals - PRSs, from several eNodeBs (say base stations) and reports these time differences to a specific device in the network, the location server (the Evolved Serving Mobile Location Center - E- SMLC). Based on these time differences and knowledge of the eNodeBs locations. The E- SMLC calculates the UEs' position. The description of the LPP (LTE positioning protocol) can be found in the [36.355] specification. The exact details of the PRS signals can be found in section 6.10.4 of [36.211], and a simple OTDOA procedure can be found in the RAN5 OTDOA test cases' descriptions in section 9 of the [37.571-1] specification. Just as the measurements for localization in Wi-Fi, the mobile device can fake these OTDOA reports to appear to the network anywhere it wants. These embodiments below may be used to protect against this type of cheating. Another term for the same measurements to be done in OTDOA by the UE is RSTD (Reference Signal Time Difference). RSTD measurement accuracy requirements are specified in [36.133]

A further example of distance measurement in 3GPP is based on arrival times of messages with reference to a time grid, and is called Enhanced cell ID based or E-CID.

Cell ID based methods were already possible before rel9. Enhanced cell ID aggregates together some already available measurements, some of them with increased accuracy requirements to improve the positioning accuracy capabilities. Enhanced Cell ID, E-CellID, or E-CID is a positioning feature introduced in rel9 E-UTRA (LTE radio). The UE reports to the network (through the serving cell or eNodeB to the location server, the Evolved Serving Mobile Location Center - E-SMLC) the serving cell ID, the timing advance (difference between its transmit and receive time) with the serving cell, the reference (narrowband) signal received power (RSRP/NRSRP), the (narrowband) reference signal received quality (RSRQ/RSRQ). The RSRP/NRSRP, and the RSRQ/RSRQ may be measured and reported from any neighboring cell, while the timing advance is only measured for the primary cell (serving cell). The serving cell or eNodeB may report extra information to the ESMLC like the angle of arrival. The ESMLC estimates the UE position based on this information and its knowledge of the cells positions.

Measuring the timing advance is as follows. In LTE or GSM, a cell sends a frequency - time grid of send or receive opportunities with a fixed timing. For LTE, the individual frequencies are the frequencies of the OFDM subcarriers and are usually 15 kHz apart. The time domain consists of successive frames of 10 ms, with each frame consisting of ten subframes and each subframe consisting of two slots of 0.5 ms. This frequency - time grid is maintained with a very strict timing by the cell. Per grid element, the cell can be transmitting to all mobile devices in range (broadcast) or to one particular device. In some of the grid elements (a frequency, subframe combination or sometimes frequency - slot combination), the cell will always be transmitting, as defined in the 3GPP specifications. These grid elements are thus ideally suited for transmitting system information to the mobile devices in the cell, such as the purpose of each of the grid elements that can be used flexibly. In each of the other grid elements, so the elements that can be used more flexibly, the cell may be broadcasting to all mobile devices in range, it may be transmitting to a particular mobile device, or it may have given a particular mobile device permission to transmit to the cell or to another mobile device in the cell.

Because it takes time for the RF waves to travel from the cell to a mobile device (about 300 meter per microsecond), the grid will appear to be delayed to a mobile device by this travel time. Suppose this travel time is t seconds. When the mobile device starts transmitting from exactly the start of the subframe in which it is allowed to transmit, it starts transmitting t seconds later than the start of the subframe at the cell. It takes again t seconds for the signal transmitted by the mobile device to arrive at the cell. Therefore, the cell receives a transmission from the mobile device not starting exactly at the start of the subframe allocated to it, but 2t seconds later. By measuring this delay, the cell can determine the distance to the mobile device.

If a mobile device is far away from the cell, the end of its transmission in a subframe may arrive later than the start of the next subframe, so cause interference. In order to overcome this problem, a cell can ask a mobile device to use a certain amount of timing advance, coded in the so-called TA value in a timing advance command addressed to the particular mobile device. The mobile device then starts its transmission TA earlier than the start of the subframe as determined by the mobile device. The maximum value possible for timing advance is 0.67 ms, corresponding to a mobile device to cell distance of slightly more than 100 km. Technical Specifications 3GPP TS 36.321 [36.321], section 6.1.3.5 "Timing Advance Command MAC Control Element" describes the TA value adjustment procedures for LTE.

A mobile device that wants to appear at a different distance can start its transmission earlier than it is supposed to by the frequency - time grid and the TA value it received from the cell when it wants to appear closer to the cell or start transmitting later than it is supposed to when it wants to appear further away from the cell than it is in reality.

An accurate and correct distance measurement is important in several applications. E.g. when Wi-Fi FTM is used to measure the distance from a car to a key fob by Wi-Fi so the car can decide to open its doors when the measured distance is less than say 5 meters it is important that the actual distance to the key fob is indeed less than 5 meters. Another example may be that a device is only allowed to stream copy-righted content to another device if the other device is not further away than a certain distance. An accurate and correct distance measurement can also be used to prevent man-in-the-middle attacks when setting up a secure authenticated channel. This is explained in the next paragraphs.

When two devices need to secure their wired or wireless communication, they may encrypt their communication. However, this requires that both wireless devices know the same key. Diffie-Hellman [DH] is a well-known technique for establishing a secret key between two parties, where the communication between the parties for establishing the secret key does not reveal any information to third parties on the established secret key. The two parties each use their own public/private key pair and exchange the public key with each other. Each party is able to compute the secret key using its own private key and the other party's public key and possibly some other information, e.g. a nonce (random number) from each party. Each party may generate a key pair anew each time it performs Diffie-Hellman or it reuses an older key pair.

When performing Diffie-Hellman over a network, a device that receives a public key for performing Diffie-Hellman does not know from which device this public key is. This may be exploited by an attacker in a so called man-in-the-middle attack. An attacker E might masquerade as the real device B with which device A wants to connect. The attacker E performs Diffie-Hellman with device A and establishes a secret key Kae with device A. Similarly the attacker masquerades as device A to device B and establishes a secret key Kbe with device B. When a message comes in from one of the devices A or B, the attacker decrypts the message with the one secret key, encrypts it with the other and forwards it to the other device. This way, the devices A and B do not notice anything strange in their communication, except for some extra delay. When they check their communication by sending the same information using another way of communication and comparing the results, they will not notice any tampering with their communication. But the attacker has complete knowledge on what they communicate. In the Device provisioning protocol [DPP], a first step is to perform DPP bootstrapping, i.e. a procedure to gain trust in the public bootstrapping key of the other device and that it is not the public key of a man-in-the-middle device. One of the

bootstrapping methods is to scan a QR-code containing the public bootstrapping key of the other device as display by or printed on the other device. The other device may also scan the QR-code of the first device (mutual authentication). After that, the bootstrapping key(s) are used in the DPP Authentication protocol, where it is checked whether the other device also possesses the private key belonging to the public bootstrapping key. If the public

bootstrapping keys in DPP would have been exchanged over Wi-Fi (any form of Wi-Fi, e.g. Neighbor Awareness Networking [NAN]), they cannot be trusted since they may have been sent by any device within RF range. Continuing with DPP the DPP authentication protocol would lead to the establishment of a common shared key Ke, but the device do not know whether they are sharing this key with the intended device or with a man-in-the-middle device. Similarly, when using Opportunistic Wireless Encryption [OWE], public keys are exchanged over Wi-Fi and by using Diffie-Hellman, a common shared key is established for the encryption of the subsequent communications between the two devices.

However, a way to limit the probability of having set up a common shared key with a man-in-the-middle device is that the devices measure the distance to the other device and if it is less than a certain distance, as determined by a rule in the device or by its user, e.g. a couple of meters, they trust the public key received from the other device. The user will know in this case that the device that sent the public key over Wi-Fi, so the intended device or a man-in-the-middle device is less than the distance limit away. The user can then judge whether there are any other devices in this range than the intended one.

Limiting the probability of having set up a common shared key with a man-in- the-middle device using a distance measurement can be done by first exchanging public keys over Wi-Fi and then computing a shared session key, e.g. by OWE or by the DPP

Authentication Protocol part of DPP (where DPP bootstrapping is done over Wi-Fi e.g. Wi-Fi Aware) and by subsequently executing the FTM procedure using encrypted FTM X frames using the shared session key determined by Opportunistic Wireless Encryption [OWE] or DPP or some other method or by at least encrypting the fields containing the tl and t4 values in the FTM X frames. If the so measured distance to the Requesting STA is less than x meters, the Initiating STA can trust the received public key and can proceed to communicate further with the other device using the agreed session key. In case of DPP, the further communication would be the DPP Configuration protocol. In case of OWE, it would be an encrypted WAN connection between AP and STA. The Initiating STA could also ask the user whether the user is sure that there is only one Wi-Fi device within the distance measured to the Responding STA and if the user confirms this, the Initiating STA proceeds with using the shared session key.

As explained above, a Responding STA may have a reason to make the Initiating STA believe that it is at another distance than it really is. In particular, the

Responding STA can make the Initiating STA believe that it is closer than it really is by decreasing t4_X values and/or increasing tl_x values. This is readily apparent from equation (11-5) from [802.11]

RTT = [ (t4_X - tl_X) - (t3_X - t2_X) ] (3)

The distance between the two devices is

d = c * RTT / 2 (4) where c is the speed of light (about 3*10^L8 m/s)

To decrease the distance as measured by the Initiating STA by 1 meter, the Responding STA has to decrease the difference of t4_Z and tl_X from their measured values by about

delta J = 2 * 1 m / 3*10^L8 m/s = 2 * 3.33*10^L-9 s = 6.66 ns (5)

However, the Responding STA has to be careful not to decrease the difference of t4_X and tl_X too much form their measured values when reporting them to the Initiating STA, because the Initiating STA will then measure a negative RTT. The Initiating STA will measure a round-trip time of 0 when the difference of the reported t4_Z and tl_X equals the reaction time of the Initiating STA, i.e. the difference between t3_X and t2_X. Therefore, it is important for successful cheating that the Responding STA knows the difference in t3_X and t2_X of the Initiating STA.

As explained above, the difference in t3_X and t2_X of the Initiating STA consists of two parts, the length of the FTM PHY frame sent (Lftm) and the reaction time R. The Responding STA has sent the FTM frame itself, so knows its length in time Lftm. The reaction time R may be known to the Responding STA in a variety of ways.

We assume that the cheating device somehow knows the real distance to the Initiating STA and can therefore precisely fake the distance that the Initiating STA will measure, by adapting the reported tl and t4. So the problem with doing measurements using FTM as described above is that a malicious Responding STA can manipulate its reported arrival times tl and t4 such that it can appear closer to or further away from the Initiating STA than it actually is. For preventing successfully faking a distance, an initiating device may involve one or more cooperating devices that are at a known position with respect to the initiating device. The cooperating devices may employ clocks synchronized with the one in the initiating device, or may share some other time reference. The cooperating device(s) measure the arrival time(s) of the measurement messages independently and report these to the initiating device. The initiating device uses properties from triangles to try and detect manipulated arrival time measurements by a cheating responding device. For 3GPP based systems, the initiating device and the one or more cooperating devices may be embodied by base stations and the responding device is embodied by a user equipment UE.

By making a distance based measurement more trustworthy, it becomes a viable tool for reliable proximity based services. Some example use cases include:

If you connect to a nearby wireless keyboard, nearby wireless storage device, nearby sensor or nearby wireless webcam, you want to be sure that you connect to the correct one, and not to some man-in-the-middle device that wants to monitor, copy or trace what you are doing.

If you meet your friend and want to connect to your friend's mobile phone to exchange some pictures, you want to be sure you connect to your friend's phone and not a man-in-the-middle.

If in a house or shop you want to automatically switch on some devices, open some door or allow a person to connect to some service with his mobile device when in close proximity, then you want to make sure the location of that mobile device is correct and not a bogus device that claims to be close by.

If in a shop you want to initiate a transaction, e.g. when close to the register, then you want to be sure that you are not being subjected to a "phishing" attack, whereby a user may be unaware and connect to a phishing device located further away instead of an official service provided by the shop.

Figure 1 shows devices for wireless communication and distance measurement. A spatial constellation 100 of devices for wireless communication comprises a first device 110 and a second device 120, the devices being physically apart at a distance 151. The first device has a first transceiver 111 for transmitting and receiving of messages and a first message processor 112. The second device has a wireless receiver 121, or a second transceiver and a second message processor 122. Also, the third device has a third transceiver 131 and a third message processor 132. The devices are equipped for wireless communication, as schematically indicated by antennas 113,123,133 connected to the transceivers 111,121,131.

The devices are arranged for distance measurement via the wireless communication according to a ranging protocol between the first device and the second device for determining a distance between the first and the second device, as further detailed below. The wireless communication includes a ranging protocol for determining a distance between the first and the second device based on an arrival time of a measurement message at the first device. The protocol may include transmitting a measurement message by the second device. In the examples the wireless communication and ranging protocol are according to [802.11], but other wireless protocols may also be used, such as Bluetooth, where providing an appropriate ranging protocol based on arrival time measurement.

The first message processor 112 is arranged for processing the messages according to the ranging protocol and determining a first arrival time of the measurement message at the first device, and determining a first distance 151 between the first device and the second device based on the first arrival time. In addition, the first message processor is arranged for communicating with the third device 130. The third device acts as a cooperating device, and is located at a trusted distance 150 from the first device. The trusted distance is known to the first device and trusted to be reliable. The trusted distance may be

predetermined, or may be measured separately or may be entered by a user. Optionally, the first message processor is arranged to determine the trusted distance according to the ranging protocol executed with the third device. Preceding the actual measurements to the second device, the trusted distance may be determined using the same, or another, ranging protocol.

In the third device, also called a cooperating device, the third message processor 132 is arranged for determining a third arrival time of the measurement message at the third device. Notably, the third device cooperates with the first device by determining the third arrival time of said same measurement message at the third device, and by transferring support data to the first device, the support data being based on the third arrival time. For example, the support data may comprise third arrival time data relative to a reference clock or timing grid, or relative to receiving some other message also received by the first device. Alternatively or additionally the support data may comprise third distance data. Thereto, the third device may be able to determine the third distance between the third device and the second device, e.g. by using further received messages and the trusted distance.

The first message processor is arranged, for assessing the determined distance, to receive the support data from the cooperating device, and to obtain a third distance 153 between the third device and the second device using the support data. The first message processor is arranged for subsequently performing a verification test on the first distance 151, the trusted distance 150 and the third distance 153. The verification test may accept the first distance as reliable when said distances correspond to a viable spatial constellation of the first device, the second device and the cooperating device. For example, the verification test includes a cosine rule check or a triangle inequality check on the viable spatial constellation as further elucidated below. The check aims to prove whether a real spatial constellation of a triangle may have the respective lengths of the sides according to the determined distances.

The ranging protocol may include exchanging messages that are cryptographically protected based on key data. Optionally, the first message processor is arranged to share the key data with the cooperating device to enable the third message processor to cryptographically process the messages according to the ranging protocol.

Encrypting messages between the first and the third device according to a wireless communication protocol, known as such, protects such messages being tampered with by the, potentially malicious, second device.

Optionally, the device may have a clock unit to provide a time reference for determining said arrival times. The first message processor may be arranged to synchronize the time reference with a corresponding clock unit in the cooperating device, e.g.

synchronized with the protocol from [802. IAS] Effectively, a time reference may be shared between the first and the third device. The third arrival time may be determined relative to the time reference, which enables the support data to include the third arrival time so determined, and being usable as such by the first device.

In the following, it is described how and to which extent, the addition of one or more Cooperating STAs can help detect that Responding STAs want to appear closer to the Initiating STA than they are in reality. The following assumptions may apply:

• the Responding STA knows how to adjust the measurements it reports to the initiating STA to appear at any distance to Initiating STA;

• the Initiating STA and the Cooperating STA(s) may have their clocks with which they time the arrival and departure times of physical frames synchronized with the 802. IAS protocol [802. IAS], or communicate otherwise such that the Initiating STA knows which measurements of the Corresponding STA(s) to combine with which measurements of its own;

• the Initiating STA and Cooperating STA(s) share information necessary for the Cooperating STA(s) so that the Cooperating STAs can receive, identify and if necessary decrypt the FTM( , ) messages from the Responding STA, so the Cooperating STA(s) can measure the arrival time of the FTM( , ) messages from the Responding STA and report these to the Initiating STA, such that the Initiating STA can combine these arrival times with its own measurements on the same messages;

• the FTM measurements may be performed more than once and the measured and reported times tl, t2, t3 and t4 of all STAs may be averaged first before they are used in distance and location computations, such that the measurement accuracy is good enough for reliable results.

Below a good defense is described against a strong attack for STAs that can only do timing measurements. In such defense an Initiating STA works together with one or more Cooperating STAs, and applies a triangle inequality as shown and, in case of two or more Cooperating STAs, applies discrepancy checks in computed positions. The detailed examples are given using the FTM protocol of [802.11] However, it works just as well with range measuring technology using Wi-Fi, Bluetooth or any other wireless (also optical) technology, where one device reports time of arrival, time of departure of protocol messages, or the difference thereof, to another device.

Figure 2 shows a spatial constellation of a device for wireless communication and a cooperating device. The constellation 200 includes a first device 210, called the initiating STA, a second device 220, called a responding STA, and a third device 230, called a cooperating STA, similar to the devices described with reference to Figure 1. A first distance dl_c is determined between the first device 210 and the second device 220, which are at a real distance dl (or d). A third distance d2_c is determined between the third device 230 and the second device 220. A trusted distance L is between the first device 210 and the third device 230, which are at a real distance d2.

In the example, the real distance from the cheating Responding STA to the Initiating STA is d, which is also the distance from the cheating Responding STA to the Cooperating STA. The Initiating STA performs distance measurement to the cheating Responding STA with any of the methods described above. In the remainder, the FTM protocol is assumed.

For each distance measurement, the Initiating STA asks the Cooperating STA what it has measured as the arrival time t2_X of the FTM(tl_X, t4_X) physical frame that the cheating Responding STA has sent. Distances with _c appended are the corresponding distances as computed by a device.

The initiating STA then computes the distance d as usual: RTT = [ (t4_X - tl_X) - (t3_X - t2_X) ] (6)

The distance between the two devices is

dl_c = c * RTT / 2 = c * [ (t4_X - tl_X) - (t3_X - t2_X) ] / 2 (7) where c is the speed of light (about 3*10^L8 m/s). If all measurements have been done and reported accurately, the computed dl_c will correspond to the real distance d within measurement accuracy.

Suppose the cheating Responding STA wants the Initiating STA to think that it is at fake distance /instead of d. The cheating Responding STA has measured t4_X and tl_X. To this end, the Responding STA changes the values of t4_r_X and tl_r_X that it reports such that their difference is 2 * d -/) / c. less than the difference of the actually measured t4_X and tl_X. Therefore, the times that the cheating Responding STA report to the Initiating STA are

(t4_r_X, tl_r_X) = ( t4_X - (1 - a)*(2 *(d-f) / c ), tl_X + a*(2 *(d-f) I c ) ) (8) where a can be freely chosen.

Using the (t4_r_X, tl_r_X) as reported by the Responding STA, the Initiating STA can compute the distance dl_c between the Responding STA and itself as

dl_c = c * RTT / 2

= c * [ ( t4_X - (1 - a)*(2 *(d -/) / c ) - (tl_X + a*(2 *(d -/) / c )) ) - (t3_X - t2_X) ]

/ 2

= c * [ (t4_X - tl_X) - (t3_X - t2_X) - (2*(d -/) / c ) ] / 2

= c * [ (t4_X - tl_X) - (t3_X - t2_X) ] / 2 - c * (2 *(d-f) / c ) / 2

= d - (d-f)

=/ (9)

This computed distance is indeed what the cheating Responding STA wanted the Initiating STA to compute.

Using the (t4_r_X, tl_r_X) as reported by the Responding STA and the t2c_X obtained from the Cooperating STA, the Initiating STA can compute the distance d2_c between the Responding STA and the Cooperating STA as

d2 c = dl_c + c * (t2c_X - t2_X) ( 10)

For any triangle with sides A, B and C, the following inequality must hold (triangle inequality)

|C| < |A| + |B| (11)

Therefore, in the constellation of Figure 2, the following two inequalities must be true for the real distances as well as for the distances as measured by the Initiating STA L £ dl + d2 (12)

L £ 2 * dl + c * (t2c_X - t2_X) (13)

The Initiating STA can check whether the above two inequalities hold for the measured distances dl_c and d2_c.

L £ dl_c + d2_c (14)

L < dl_c + dl_c + c * (t2c_X - t2_X) (15)

L £ 2 */+ c * (t2c_X - t2_X) (16)

In the constellation of Figure 2, dl and d2 are equal, so t2c_X and t2_X are equal. That means that inequality (16) will not hold anymore if the cheating Responding STA chooses / as follows:

f< L / 2 (17)

This means that in the constellation of Figure 2, the Initiating STA can detect that the Responding STA faked its measurements such that it wants to appear closer than L I 2 to the Initiating STA.

Figure 3 shows a spatial constellation of two devices for wireless communication. The constellation 300 includes a first device 310, called the initiating STA, a second device 320, called a responding STA, and a third device 330, called a cooperating STA, similar to the devices described with reference to Figure 1. A first distance dl_c is determined between the first device 310 and the second device 320, which are at a real distance dl (or d). A third distance d2_c is determined between the third device 330 and the second device 320, which are at a real distance d2. A trusted distance L is between the first device 310 and the third device 330.

In the example, the Initiating STA will measure / as the distance to the cheating Responding STA and will determine /- L as the distance between the Cooperating STA and the cheating Responding STA.

Inequality (14) will now be

L < dl_c + d2_c (18)

L £ 2 * f- L (19)

L </ (20) which only holds if /is larger than or equal to L. Therefore, the defense proposed does work for the constellation in Figure 3 and the Initiating STA can detect that the Responding STA faked its measurements such that it wants to appear closer than L to the Initiating STA. Figure 4 shows a further spatial constellation of two devices for wireless communication. The constellation 400 includes a first device 410, called the initiating STA, a second device 420, called a responding STA, and a third device 430, called a cooperating STA, similar to the devices described with reference to Figure 1. A first distance dl_c is determined between the first device 410 and the second device 420, which are at a real distance dl (or d). A third distance d2_c is determined between the third device 430 and the second device 420, which are at a real distance d2. A trusted distance L is between the first device 410 and the third device 430.

In the example, the cosine rule is used. d2 is computed as

d2² = dl² + L² - 2 * dl * L * cos(cp) (21)

Relating dl and L using a in the following way

dl = a * L (22) we get

d2 = sqrt( (a * L)² + 1} - 2* a* L* L* cos(cp) )

= L * sqrt( a²+l-2*a* cos(cp) ) (23)

However, the cheating Responding STA changes the information it sends to the initiating STA such that the distances dl_c and d2_c that the Initiating STA will become

dl_c = dl - (dl - f) (24) d2_c = d2 - (dl -f) (25)

The Initiating STA checks whether inequality (14) holds for the distances it measured

L < dl_c + d2_c (26)

L £f+ L* sqrt( a²+1-2*a* cos(cp) ) - a * L+f (27)

L £2* f + L * { sqrt( a²+1-2*a* cos(cp) ) - a } (28)

/ >0.5 * L * { 1 + a - sqrt( a²+1-2*a* cos(cp) ) } (29)

Therefore, the Initiating STA will detect a Responding STA that fakes its reported measurements when the Responding STA chooses / as in the following inequality.

f/L <0.5*{l + a- sqrt( a²+l-2*a* cos(cp) ) } = T1 (30)

Table 1 shows the values of 77 for combinations of a > 0 and 0 < f < 90 degrees.

Table 2 shows the values of 77 for combinations of a > 0 and 90 < f < 180 degrees.

Suppose one is interested in detecting that a Responding STA wants to fake that it is at distance 0.5*/. or closer. So, if a faking STA (that is further away than 0.5 L) wants to appear closer than 0.5 L, this can be detected if the faking STA is in the non-shaded area. So the measured distance for these faking STAs will be less than 0.5L, because that is their intention.

If the STA is indeed within 0.5*Z, it does not have to fake it, so the area for a < 0.5 has no shading in Table 1.

The grey shaded area in Table 1 and table 2 is where the real distance between the Responding and Initiating STA is larger than 0.5*/. (so a > 0.5) and where the Initiating STA cannot detect that the Responding STA wants to appear at a distance of 0.5*/. or less. The proposed method protects against cheating Responding STAs that reside in a large area for 0 < f < 90 degrees. However, the method does not protect for cheating Responding STAs in the area for 90 < f < 180 degrees. Thereto it is proposed to use a further cooperating device. So, a system for distance measurement may contain the first device and at least two cooperating devices. Various examples are discussed below. In such a system a fourth device, acting as a second cooperating device, may have a fourth message processor arranged for determining a fourth arrival time of the measurement message at the fourth device, and transferring fourth support data to the first device, the fourth support data being based on the fourth arrival time. The first message processor is arranged for receiving the fourth support data from the second cooperating device, obtaining a fourth distance between the fourth device and the second device using the fourth support data, and to perform the verification test also using the second trusted distance and the fourth distance.

In an embodiment the verification test uses a combination of a first triangle inequality on a first spatial constellation of the first device, the second device and the third device, and a second triangle inequality on a second spatial constellation of the first device, the second device and the fourth device. The verification test may include the tests discussed in the section on using the triangle inequality and two Cooperating STAs below.

Alternatively, the verification test may use the two cooperating STAs as described in a later section on using the triangle inequality and two Cooperating STAs in a better way. For this, the distance between the two cooperating devices may be known by the first device. In an embodiment, the verification test may verify whether a first location of the second device according to the first spatial constellation corresponds to a second location of the second device according to the second spatial constellation. Optionally, the verification test may use an inconsistency check for detecting whether all of the determined distances are larger than zero.

Also, the verification test may be based on more than the first and second trusted distance, namely the whole constellation of first, third and fourth device. For example, this can be done by using a trusted angle between the connecting lines between the initiating device and both cooperating devices. Optionally, the verification test may be based on a setup wherein the third device and the fourth device are arranged so that a trusted angle between a line from third device to first device and a line from fourth device to first device is at least 90 degrees. Optionally, the verification test may be based on a setup wherein the third device and the fourth device are arranged opposite to each other with respect to the first device. Optionally, the verification test may be based on a setup wherein the second trusted distance corresponds to the trusted distance. Various situations and calculations for the verification test are discussed in the following sections. The following example uses the triangle inequality and two Cooperating STAs.

Figure 5 shows a spatial constellation having two cooperating devices. The constellation 500 includes a first device, marked‘initiating STA’, and two‘cooperating STAs’, similar to the devices described with reference to Figure 1. A first trusted distance L is between the first device and the first cooperating STA, while a second trusted distance L is between the first device and the second cooperating STA.

Using the example constellation, a better performance is achieved for 90 < f < 180, by using a second Cooperating STA, exactly opposite the first one. In that case, the Initiating STA can detect many, although not all cheating Responding STAs that want to appear closer than 0.5*/.. For this constellation, the area in which a Responding STA that wants to fake that it is at distance 0.5 L or closer is shown in grey in Figure 5. This area resembles a ring with a wedge-shaped cross-section.

Figure 6 shows a second spatial constellation having two cooperating devices. The constellation 600 includes a first device, called the initiating STA, and two cooperating STAs, similar to the devices described with reference to Figure 1. A first trusted distance L is between the first device and the first cooperating STA, while a second trusted distance L is between the first device and the second cooperating STA. Using the example constellation, the Initiating STA uses two Cooperating STAs as described above and is interested in that a Responding STA wants to fake that it is at distance 0.3 L or closer. In that case, it can be seen from Table 1 that all Responding STAs that are at least 1.1 L away are caught and many STAs that are closer than 1.1 L.

Figure 7 shows a further spatial constellation having two cooperating devices. The constellation 700 includes a first device 710, called the initiating STA, a second device 720, called responding device, and two cooperating STAs 730,731, similar to the devices described with reference to Figure 1. A first trusted distance L is between the first device and the first cooperating STA, while a second trusted distance L is between the first device and the second cooperating STA. Note that in this particular constellation, the second device 720 can be anywhere in 3d on a circle with its center on the line through the first, third and fourth device. Because of this, we compute the location of the second device here only as a 2d coordinate in the plane through the first, second, third and fourth device.

In the example constellation, the triangle inequality and two Cooperating STAs are used. The triangle inequality is used on the measurements via Cooperating STA 1 and 2. Using the cosine rule, we can compute <727 as

_<727² = L * sqrt( a²+1-2*a* cos(cp) ) (31) and d22 as

_<72_2² = L * sqrt( a²+1-2*a* cos(180 - f) )

= L * sqrt( a²+1+2*a* cos(cp) ) (32)

The cheating Responding STA changes the information it sends to the initiating STA such that the distances dl_c, <727 c and <722 c that the Initiating STA will become

dl_c = dl - ( _<77 -f) (33) d2J_c = _<727 - (_<77 -f) (34) d2_2_c = d2_2 - (dl -f) (35)

The Initiating STA checks whether inequality (14) holds for the distances it received from Cooperating STA 1 and 2

2*L £ d2J_c + d2_2_c <X> (36)

2*L£L * sqrt( a²+1-2*a* cos(cp) ) + L * sqrt( a²+1+2*a* cos(cp) ) -2 * (a*L-f)

(37)

L£f+L* { sqrt( a²+1-2*a* cos(cp) ) + sqrt( a² + 1+ 2*a* cos(cp) ) - 2*a}/2 =>

(38) /> 0.5 * Z * { 2 +2 * a - sqrt( a²+l-2*a* cos(cp) ) - sqrt( a² + l+ 2*a* cos(cp) ) }

(39)

//Z <0.5*{2 +2*a - sqrt( a²+l-2*a* cos(cp) ) - sqrt( a²+l+2*a* cos(cp) ) } =

T3 (40)

Table 3 shows the values of T3 for combinations of a > 0 and 0 < f < 180 degrees. The table of values of T3 is symmetric around f = 90 degrees.

Suppose we are interested in detecting that a Responding STA wants to fake that it is at distance 0.5*/. or closer. If the STA is indeed within 0.5*/.. it does not have to fake it, so the area for a < 0.5 has no shading in Table 3.

The grey shaded area in Table 3 is where the real distance between the

Responding and Initiating STA is larger than 0.5*/. (so a > 0.5) and where the Initiating STA cannot detect that the Responding STA wants to appear at a distance of 0.5*/. or less. It is clear that proposed method protects against cheating Responding STAs that reside in a large area for 0 < f < 90 degrees, and that the area where it does not protect (the grey-shaded area) is clearly much smaller than the one in Table 1.

In the constellation of Figure 7, it is possible to compute the position (x, y) in the plane through the 4 devices in several ways. If the Responding STA reports its measurements faithfully, these computed positions will coincide, except for measurement errors. But they will not if the Responding STA is faking its measurements, especially when it wants to appear closer than it really is.

Assume the Initiating STA to be at (x, y ) = (0, 0), Cooperating STA 1 at ( L , 0) and Cooperating STA 2 at (-/.. 0). Note that these STAs and the Responding STA are of course located in a 3-d world. The plane (x, y ) can be any plane in 3-d in which the line through the Initiating STA and the two Cooperating STAs lies. The computations for the y- coordinate in this section should have yielded two values +/- y. Keeping only the positive solution does not present any problem because the other solution for y is obtained when the plane is rotated by 180 degrees around the line through the Initiating STA and the two Cooperating STAs. First it is checked whether the distances determined by the Initiating STA are larger than zero, as explained in the section "Relation between cosine rule check and triangle inequality check" below.

dl_c > 0 (41) d2_l_c > 0 (42) d2_2_c > 0 (43)

We assume a cheating Responding STA if any of the three inequalities above does not hold. If these three inequalities hold, we use the cosine rule

cos ( ZACB ) = ( |A|² + |B|² - |C|² ) / ( 2 * | A| * |B| ) (44) for 4 combinations of edges to compute the position of the Responding STA. We always use the point b as the position of the responding STA.

Using point a = ( L , 0) and c = (0, 0), we can measure the Responding STA to be at bl = ( xl , yi)

cos _cl = ( dl_c ² + L² - d2_l_c² ) / ( 2 * dl_c * L ) (45)

Using point a = ( -L , 0) and c = (0, 0), we can measure the Responding STA to be at b = (x2, y2)

cos_c2 = ( dl_c² + L² - d2_2_c ² ) / ( 2 * dl_c * L ) (46)

Using point a = ( L , 0) and c = {-L, 0), we can measure the Responding STA to be at b = (x3, y3)

cos_c3 = ( d2J_c² + 4 L² - d2_2_c ² ) / ( 2 * d2J_c * 2 L ) (47)

Using point a = {-L, 0) and c = ( L , 0), we can measure the Responding STA to be at b = x4, y4 )

cos_c4 = ( d2_2_c² + 41} - d2J_c ² ) / ( 2 * d2_2_c * 2 L ) (48)

Then we check whether all 4 of the computed cosines are in the interval [-1, 1] From the section "Relation between cosine rule check and triangle inequality check" below, we know that we have up to now performed the same test as the triangle inequality tests, so with the check up to now, the above three tables apply.

If the four computed cosines are all in the interval [-1, 1], we compute the four points bl, b2, b3 and b4 for the position of the Responding STA as follows.

xl = cos cl * dl_c (49) yl = sqrt( 1 - cos cl ² ) * dl_c (50) x2 = -cos _c2 * dl_c (51) y2 = sqrt( 1 - cos_c2² ) * dl_c (52) x3 = L - cos _ c3 * d2_l_c (53) y3 = sqrt( 1 - cos_c3² ) * d2_l_c (54) x4 = -L + cos_c4 * d2_2_c (55) y4 = sqrt( 1 - cos _c4² ) * d2_2_c (56)

If the Responding STA faithfully reported its time measurements, these 4 points should be the same except for the influence of timing measurement errors. Note that as also explained elsewhere, measurement errors can be made smaller, by performing the measurements multiple times and averaging the results. However, these 4 points are different from each other when the responding STA fakes its measurements to appear closer than it really is and when the Responding STA is not on the line through Cooperating STA 1 and 2.

We compute the maximum emax of all the distances between the 4 points bl, b2, b3 and b4 emax = MAX | bi - bj | for i e {1, 2, 3, 4} and j e { 1, 2, 3, 4} (57)

Note that it is not necessary to compute b4, since b3 and b4 will be computed as the same point except for numerical errors.

Table 4 shows the values of emax / L except when any of the cosine checks fail, in which case the value of 99 is shown. The value / at which the cheating Responding STA wants to appear to be is important for these checks. We chose / to be 0.9 in Table 4.

As can be seen from this table, for a > 0.9, the cells showing 99 coincide with the cells having a value > 0.9 in Table 3, which shows the equivalency discussed in the section "Relation between cosine rule check and triangle inequality check" below.

Responding STAs that are actually within a range of 0.9 L from the Initiating STA do not have to fake that they are within this range, so this region is not shaded in Table 4. Using 0.25 L as the threshold for the maximum discrepancy in the measurements bl, b2, b3 and b4 for the position of the Responding STA, we shaded the area of Table 4 where the cells have a value less than 0.25 and a > 0.9.

That means that in the shaded area, so basically for Responding STAs with a distance between 0.9 l and 1.2 L from the Initiating STA, the proposed system cannot determine that these Responding STAs are faking their timing measurements to appear to be located within 0.9 L from the Initiating STA.

Therefore, using two Cooperating STAs located on opposite locations at a distance L from the Initiating STA, the proposed system can detect Responding STAs located at all distances larger than 1.2 L from the Initiating STA that they are faking their timing measurements to appear to be located within 0.9 L from the Initiating STA.

The following section uses the triangle inequality and more than two

Cooperating STAs. A better performance may be obtained by placing more than two Cooperating STAs around the Initiating one. For best detection of cheating Responding STAs located in as many positions as possible around the initiating STA, it is best to place the Initiating STA and Cooperating STAs in a plane, when using three Cooperating STAs. That is because if the Initiating STA is not on the plane through the three Cooperating STAs, there will be a volume were the cheating Responding STA is always closer to the Initiating STA than any of the three Cooperating STAs and where therefore the proposed method does not work (see e.g. Table 2).

It is also possible to use two Cooperating STAs and an Initiating STA that are not positioned on one line, but which constellation forms a triangle. Using the distances dl, d2_l, d2_2 and the lengths of the sides of the triangle formed by the two Cooperating STAs and the Initiating STA, the Initiating STA can perform checks using the cosine rule on triangles formed by the second device and any pair of devices from the set of the two Cooperating STAs and the Initiating STA.

When using four Cooperating STAs, they should ideally be placed on the comers of a regular tetrahedron and the Initiating STA is located at the centroid of the regular tetrahedron. This constellation is the most symmetric possible one and offers therefore the best protection.

The vertices for a regular tetrahedron with its 4 points on the unit sphere, centroid at the origin and with a horizontal, and lower face level are

A = ( sqrt(8/9), 0, -1/3 )

B = ( -sqrt(2/9), sqrt(2/3), -1/3 )

C = ( -sqrt(2/9), -sqrt(2/3), -1/3 )

D = ( 0, 0, 1 )

Therefore, the Cooperating STAs are located at the position of the vertices and the Initiating STA is located at the origin and the distance L is equal to 1 in this case. The largest distance in between any two STAs is the distance between any two Cooperating STAs, so the length of each of the edges of the regular tetrahedron, which is

II A - D|| = I) ( sqrt(8/9), 0, -1/3 ) - ( 0, 0, 1 ) ||

= || ( sqrt(8/9), 0,— 4/3 ) ||

= sqrt(8/3) « 1.63 (58) The largest angle between any Cooperating STA, the origin and a responding STA is when the Responding STAA is at a line through the origin and the centroid of any of the four faces of the regular tetrahedron. The centroid of the face ABD is

F = { ( sqrt(8/9), 0, -1/3 ) + ( -sqrt(2/9), sqrt(2/3), -1/3 ) + ( 0, 0, 1 ) } / 3 = ( sqrt(8/9) - sqrt(2/9) , sqrt(2/3), 1/3 ) / 3 (59)

The angles ZAOF, ZBOF and ZDOF are all the same. This angle can be computed using the cosine rule

cos( ZDOF ) = (||D||² + ||F||² - ||D - F||² ) / ( 2 * ||D|| * ||F|| ) (60)

||D||² = 1 (61)

||F||² = { ( sqrt(8/9) - sqrt(2/9) )² + 2/3 + 1/9 } / 9

= { 8/9 + 2/9 - 2 * sqrt( 16/81) + 7/9 } / 9

= 1/9 (62)

||D - F||² = { ( sqrt(8/9) - sqrt(2/9) )² + 2/3 } / 9 + ( 8/9 )²

= { 8/9 + 2/9 - 2 * sqrt( 16/81) + 2/3 } / 9 + 64/81 = { 2/9 + 6/9 } / 9 + 64/81

= 72/81 = 8/9 (63)

Therefore

cos( ZDOF ) = (1 + 1/9 - 8/9 ) / ( 2 * 1 * 1/3 )

= 3 * (2/9) / 2

= 1/3 (64)

ZDOF ) = arccos(l/3) = 70.53 degrees (65)

Therefore, with a constellation of one Initiating STA located at the centroid of a regular tetrahedron and four Cooperating STAs located at the vertices of that tetrahedron at a distance L from the Initiating STA, all Responding STAs that want to fake that they are closer than 0.5 L to the Initiating STA can be detected if they are further away than 1.5L from the Initiating STA, see Table 1. Many such STAs in the area between 0.5 L and 1.5 L can be detected.

Optionally, the defense may be improved by adding inconsistency checks in computed positions using the Initiating STA and the Cooperating STAs similar to defense explained in the previous section.

In an embodiment, the ranging protocol may include the first device, acting as an initiating device, sending an initiating message to the second device, while, upon receiving the initiating message, the second device has to send the measurement message. The first message processor is arranged to exchange role-change data with the third device to enable the third device to act as the initiating device for a distance measurement. Thereto, the third device is arranged, upon receiving the role-change data, to obtain a third distance between the third device and the second device according to the ranging protocol based on a second measurement message, and to transfer third support data to the first device, the third support data being indicative of the third distance. For example, the third support data may contain the t2 and t3 values of the FTM protocol that the third device has measured. The tl and t4 values may also be part of it, but this is not necessary, since the first device may receive and use the original message from the second device containing tl and t4.

Also, the first message processor is arranged to determine a second distance between the first device and the second device when receiving the second measurement message at the first device, to receive, from the third device, the third support data, and to perform the verification test also using the second distance and the third support data. In the embodiment, an Initiating STA and a Cooperating STA swap roles - or differently worded- compute position twice using two Initiating STAs.

In the constellation of Figure 4, we now have two devices 410, 430, acting as a first STA 1 and a second STA 2, that work together to determine the distance to the

Responding STA. In a series of measurements, STA 1 acts as an Initiating STA and STA 2 as the Cooperating STA and in a second series of measurements, they assume the opposite roles. The individual time measurements in each series are averaged before a distance is computed in order to improve the distance measurement result. All individual measurements of the first series may be done before the roles are swapped and the individual measurements of the second series are performed. But the role swapping may also be done after any number of individual measurements.

Using the timing measurements from the first series of measurements, so with STA 1 being the Initiating STA, we can use equations (49) and (50) to compute the position rl = ( xl , yl) of the Responding STA. Using the timing measurements from the second series of measurements, so with STA 2 being the Initiating STA, we can use similar equations to compute the position r2 = ( x2 , yl) of the Responding STA. Note that in this particular constellation, the second device 420 can be anywhere in 3d on a circle with its center on the line through the first and third device. Because of this, we compute the location of the second device here only as a 2d coordinate in the plane through the first, second and third device. The computed points rl and r2 should be equal, except for measurement errors, if the Responding STA faithfully reports it timing measurements. But this may be different when the Responding STA wants to appear closer than it actually is.

In the previous sections, a cheating Responding STA tried to appear at distance / from the Initiating STA. Suppose the Responding STA does not know that the two STAs swap roles every now and then and tries to appear at fake distance / from each of them. In this case, rl and r2 will clearly be different, especially if/< 0.5 L.

Therefore, using two or more STAs that each serve as Initiating STA and computing the location of the Responding STA using the distances measured by each of the Initiating STAs and judging the difference in computed locations is a good idea to detect Responding STAs that fake their timing measurements.

However, the attack described above is not the best possible attack in this situation. A better attack is when the Responding STA knows with which Initiating STA It is performing the FTM protocol and that it knows the parameters of the constellation (so L and f or dl and d2). This may be difficult to get to know in practice, but it is not impossible. It is good security practice to assume that an attacker knows everything, except secret cryptographic keys. Therefore, the defense as described in the previous sections is preferably used.

The following section discusses the relation between cosine rule check and triangle inequality check. Checking whether the triangle inequalities holds for three lengths

|A|, |B| and |C|

|C| < |A| + |B| (66)

|A| < |B| + |C| (67)

|B| < |A| + |C| (68) is the same as checking whether

-1 < cos (ZACB ) < 1 (69)

The cosine rule for angle ZACB is

cos (ZACB ) = ( |A|² + |B|² - |C|² ) / ( 2 * | A| * |B| ) (70)

Checking whether the cosine is not less than -1 yields

cos (ZACB ) > -1

( |A|² + |B|² - |C|² ) / ( 2 * |A| * |B| ) > -1 (71)

We can derive the following inequality from inequality (71) only if |A| * |B| ) > 0

( |A|² + |B|² - |C|² ) > -2 * |A| * |B| ( |A|² + |B|² + 2 * |A| * |B| - |C|² ) > 0 O

( |A| + |B| )² - |C|² > 0

( |A| + |B| )² > |C|² ^

|C| < ( |A| + |B| ) (72) which is the same as inequality (66).

Similarly, checking whether the cosine is not more than 1 yields

cos (ZACB ) < 1

( |A| - |B| )² - |C|² < 0 O

( |A| - |B| )² < |C|²

abs( |A| - |B| ) < |C|

|A| < ( |B| + |C| ) & |B| < ( |A| + |C| ) (73) which two inequalities must also hold for a triangle.

Note that real distances are always larger than or equal to 0. The reasoning above holds for positive distances, but not for negative distances. The distances obtained by the Initiating STA may be negative when a Responding STA fakes its measurements to become more closely. Therefore, checking on the three triangle inequalities is equivalent to checking whether the three distances measured are greater than or equal to 0 and checking whether the cosine inequality (69) holds.

In an embodiment, the third message processor is arranged to determine a third signal strength of at least one message received from the second device, and to include third signal strength data in the support data to the first device. The first message processor is arranged to determine a first signal strength of at least one message received from the second device, and to verify whether the determined distances are reliable by comparing the first signal strength and the third signal strength to respective expected signal strengths at the determined distances. In the embodiment, distance measurement based on signal strengths is additionally performed to increase the reliability. In addition to arrival and transmit times, also received signal strength can be used as a measurement of distance. A device includes the transmit power with which a message is sent to another device in that message, the other device measures the received signal strength and the other device can determine the distance based on assumed transmitter antenna properties (e.g. that it is omni-directional) and that the signal strength decreases with a power of 2 with the distance. When at least one cooperating device measures the signal strength of that same message and includes such data in the support data as transferred to the first device, the first device may determine the ratio of the distances from the second device based on the received signal strengths.

In an embodiment, the first device and third device may be embodied by base stations in a 3GPP network, while the second device is embodied by a UE. Base stations in 3 GPP transmit and receive in a time-frequency grid of so-called Resource Elements. Some of the positions in the time- frequency grid are fixed by a 3 GPP standard and are used to broadcast system information to all UEs in range of the base station, e.g. information of when and on which frequencies the base station will send something to a particular UE (downlink) and when and with which frequencies, a particular UE may send something to the base station (uplink) or to a particular other UE (sidelink). When base stations are cooperating according to this invention, their time-frequency grids should be aligned and synchronized and they should each make the same time-frequency positions (Resource Elements) in the grid available so they are all able to measure the arrival time or received signal strength of the same message from the same UE.

In a further embodiment the ranging protocol comprises an additional attribute or additional message that may for example be added to the ranging protocol as defined in [802.11], containing a credential (e.g. public key) or a hash of a credential or an encrypted credential. Such a message is an example of a message that is cryptographically protected based on key data. The second device may include such credential or hash of a credential or an encrypted credential as part of the message exchange for the ranging protocol. To be symmetric, also the first device may include such credential, hash of a credential or encrypted credential in a further message. The preferred field containing the credential or hash of a credential or an encrypted credential in a message of the ranging protocol is a field of which the signal or at least part of the signal transferring that field is used to measure the transmit or arrival time of the message, so that it is very difficult if not impossible for another device to insert its credential or hash of its credential or its encrypted credential in a message that is used to measure distance between the first and second device. The closer (in time) that the signal carrying the credential or hash of a credential or an encrypted credential is to the signal that is used to measure range, or the more overlap between these signals, the better. This way, the first device can be certain that the credential or hash of a credential or an encrypted credential in a message of the ranging protocol is indeed the one of the second device with which it is executing the range measurement protocol. In one embodiment, the first message processor is arranged to process this credential or hash of a credential or encrypted credential, and verifies if it matches a credential that has previously been used by a device with which it has successfully performed device authentication and established mutual trust, such as by using the Wi-Fi Protected Setup Protocol, Device Provisioning Protocol, Diffie-Hellman key exchange and/or the 4-way WPA2 handshake. If a match is found, the first device may assume that the distance measurements between the first and second device can be trusted and deemed reliable. If no match is found, the first device will distrust the distance measurements between the first and second device and perform additional steps to verify the reliability of the distance measurements, such as using the mechanisms as described in other embodiments. In another embodiment, the measured values (e.g. the first time data and/or second time data) are encrypted using a key that was agreed or is derived from agreed credentials between the first and second device as established during an earlier device authentication procedure performed between the first and second device.

In an alternative embodiment, the second device may include a credential or hash of credential or an encrypted credential that will be used during later connection setup. The first message processor is arranged to process and store the received credential or hash of credential or an encrypted credential in conjunction with the measured distance between the first device and the second device, in order to securely correlate the measured distances with the particular device that connects with that credential. Upon setting up the connection between the first and second device, the first device verifies if the same credential or a derivative thereof is used whilst performing the device authentication, such as during performing the Wi-Fi Protected Setup Protocol, Device Provisioning Protocol, Diffie- Hellman key exchange and/or whilst performing the 4-way WPA2 handshake. By doing so, the first device can determine that the device with which it is connecting, is the same device as for which a particular distance measurement was done. In particular, if the credential was a public key and if the setting up the connection between the first and second device included that the second device has successfully proved to device 1 that it has possession of the private key belonging to the public key as credential in the range measurement, the first device can be certain that the second device is the one that it measured the range to and not an imposter.

In an embodiment, the first message processor is arranged, upon assessing that the determined distance is not reliable, to proceed to a different process or function, a deny access to data or a function, instead of the intended process. For example, the normal distance based process may be to grant access to a location based service or local peripheral. Also, routing to or from the first device over another network, e.g. ethemet, the Internet, a 3 GPP core network, may be controlled or denied based on the distance measurement. If the determined distance is deemed unreliable, all further communication and/or access may be refused, and/or a warning message may be sent to a management system or guard keeper. Also the first message processor may be arranged, before progressing to any normal distance based process, to engage a different security protocol with the second device may be executed, such as requesting additional credentials and/or a personal identification of the user. The different security protocol may be an additional process or a further enhanced execution of the main protocol, and may e.g. result in a more stringent or severe step in the normal security process. Optionally, the first message processor is arranged to request a further distance measurement using a different ranging protocol and/or a different type of wireless communication, for example NFC at a very close distance or by the human operator of the second device to provide some identification and/or biometrical data like a fingerprint. Also the first message processor may be arranged, before progressing to any normal distance based process, to deny or restrict access to at least some data and/or to at least one application in the first device. For example a basic service may be provided even if the distance is deemed unreliable, while an extended service is provided if the distance is deemed reliable.

Figure 8 shows a method for distance measurement via wireless communication between a first device and a second device, the wireless communication comprising a ranging protocol as described above. The first device and the second device are similar to the first and second device as shown and further described with reference to Figures 1. A third device is acting as a cooperating device being located at a trusted distance from the first device. The method may be executed by a processor in the first device, but may also be processed by a processor in a different device and/or at a different time based on the received arrival times and support data. For example, the method may be executed at a further device that is not actively participating in the ranging protocol, but receives all messages and is aware of the trusted distance.

The method starts at node START 801. In a first stage RNGP 802 the method may execute the ranging protocol and perform the arrival time measurements as described with reference to Figure 1. The method continues with stage OD1 803 by obtaining a first distance between the first device and the second device based on a first arrival time of the measurement message at the first device and subsequently communicates with the cooperating device in stage CO_COP 804. The cooperating device is arranged for determining a third arrival time of the measurement message at the cooperating device, and providing support data, the support data being based on the third arrival time. Then the method continues with assessing the determined distance. In a next stage OD3 805 a third distance is obtained between the third device and the second device using the support data, e.g. calculated based on the third arrival time and the transmission time of the measurement message. Finally, in stage VERT 806, a verification test is performed on the first distance, the trusted distance and the third distance. The verification test accepts the first distance as reliable when said distances correspond to a viable spatial constellation of the first device, the second device and the cooperating device. The test may be based on the triangle inequalities and inconsistency checks as elucidated above.

In an embodiment, the method may include a preparatory stage, in which the first device is instructed to act as an initiating device to provide the first arrival time or the first distance. Similarly, the third device may be instructed to act as the cooperating device to provide the support data being based on the third arrival time. The preparatory stage may be executed by a separate control device, a computer or server. Alternatively, the first device or the third device may execute said instructing.

Figure 9 shows a method for acting as a cooperating device in a distance measurement via wireless communication between a first device and a second device as described with Figure 8 above. The cooperating device may be located at a trusted distance from the first device.

The method starts at node START 901. In a first stage RNGP 902 the method may monitor the ranging protocol as performed by the first and the second device. The method continues with stage ARR3 903 by determining a third arrival time of the

measurement message at the cooperating device. Subsequently, in stage CO_IN 904, the cooperating side subsequently communicates with a first device, e.g. using the wireless protocol or using a wired connection. Next, in stage SUP 905, the method provides support data to the first device. The support data is based on the third arrival time. Then the method at the cooperating side ends at node END 906. As described above, the first device is arranged to obtain said third distance between the cooperating device and the second device using the support data, and to perform the verification test on the first distance, the trusted distance and the third distance.

Figure 10a shows a computer readable medium 1000 having a writable part 1010 comprising a computer program 1020, the computer program 1020 comprising instructions for causing a processor system to perform one or more of the above methods in the system as described with reference to Figure 9-10. The computer program 1020 may be embodied on the computer readable medium 1000 as physical marks or by means of magnetization of the computer readable medium 1000. However, any other suitable embodiment is conceivable as well. Furthermore, it will be appreciated that, although the computer readable medium 1000 is shown here as an optical disc, the computer readable medium 1000 may be any suitable computer readable medium, such as a hard disk, solid state memory, flash memory, etc., and may be non-recordable or recordable. The computer program 1020 comprises instructions for causing a processor system to perform said methods.

Figure 10b shows in a schematic representation of a processor system 1100 according to an embodiment of the device or server as described with reference to Figure 9- 10. The processor system comprises one or more integrated circuits 1110. The architecture of the one or more integrated circuits 1110 is schematically shown in the Figure. Circuit 1110 comprises a processing unit 1120, e.g., a CPU, for running computer program components to execute a method according to an embodiment and/or implement its modules or units. Circuit 1110 comprises a memory 1122 for storing programming code, data, etc. Part of memory 1122 may be read-only. Circuit 1110 may comprise a communication element 1126, e.g., an antenna, connectors or both, and the like. Circuit 1110 may comprise a dedicated integrated circuit 1124 for performing part or all of the processing defined in the method. Processor 1120, memory 1122, dedicated IC 1124 and communication element 1126 may be connected to each other via an interconnect 1130, say a bus. The processor system 1110 may be arranged for contact and/or contact-less communication, using an antenna and/or connectors, respectively.

Computer program products, downloadable from a network and/or stored on a computer-readable medium and/or microprocessor-executable medium, are provided that comprise program code instructions for implementing the above methods when executed on a computer for protecting location information, as elucidated further below.

Any method according to the invention may be executed using software, which comprises instructions for causing a processor system to perform the respective method. Software may only include those steps taken by a particular sub-entity of the system. The software may be stored in a suitable storage medium, such as a hard disk, a floppy, a memory etc. The software may be sent as a signal along a wire, or wireless, or using a data network, e.g., the Internet. The software may be made available for download and/or for remote usage on a server. A method according to the invention may be executed using a bitstream arranged to configure programmable logic, e.g., a field-programmable gate array (FPGA), to perform the method. It will be appreciated that the software may be in the form of source code, object code, a code intermediate source and object code such as partially compiled form, or in any other form suitable for use in the implementation of the method according to the invention. An embodiment relating to a computer program product comprises computer executable instructions corresponding to each of the processing steps of at least one of the methods set forth. These instructions may be subdivided into subroutines and/or be stored in one or more files that may be linked statically or dynamically. Another embodiment relating to a computer program product comprises computer executable instructions corresponding to each of the means of at least one of the systems and/or products set forth.

It will be appreciated that, for clarity, the above description describes embodiments of the invention with reference to different functional units and processors. However, it will be apparent that any suitable distribution of functionality between different functional units or processors may be used without deviating from the invention. For example, functionality illustrated to be performed by separate units, processors or controllers may be performed by the same processor or controllers. Hence, references to specific functional units are only to be seen as references to suitable means for providing the described functionality rather than indicative of a strict logical or physical structure or organization. The invention can be implemented in any suitable form including hardware, software, firmware or any combination of these.

It is noted that in this document the word‘comprising’ does not exclude the presence of elements or steps other than those listed and the word‘a’ or‘an’ preceding an element does not exclude the presence of a plurality of such elements, that any reference signs do not limit the scope of the claims, that the invention may be implemented by means of both hardware and software, and that several‘means’ or‘units’ may be represented by the same item of hardware or software, and a processor may fulfill the function of one or more units, possibly in cooperation with hardware elements. Further, the invention is not limited to the embodiments, and the invention lies in each and every novel feature or combination of features described above or recited in mutually different dependent claims.

Reference documents:

[36.133] 3GPP TS 36.133: "Evolved Universal Terrestrial Radio Access (E-UTRA); Requirements for support of radio resource management".

[36.211] 3GPP TS 36.211 : "Evolved Universal Terrestrial Radio Access (E-UTRA); Physical Channels and Modulation". [36.214] 3GPP TS 36.214: "Evolved Universal Terrestrial Radio Access (E-UTRA); Physical layer - Measurements".

[36.321] 3GPP TS 36.321 : "3rd Generation Partnership Project; Technical Specification Group Radio Access Network; Evolved Universal Terrestrial Radio Access (E-UTRA); Medium Access Control (MAC) protocol specification".

[36.355] 3GPP TS 36.355: "Evolved Universal Terrestrial Radio Access (E-UTRA); LTE Positioning Protocol (LPP)".

[37.571-1] 3GPP TS 37.571-1 : "Universal Terrestrial Radio Access (UTRA) and Evolved UTRA (E-UTRA) and Evolved Packet Core (EPC); User Equipment (UE) conformance specification for UE positioning; Part 1 : Conformance test specification" [802.11] IEEE Computer Society,“IEEE Standard for Information Technology-

Telecommunications and Information Exchange Between Systems - Local and Metropolitan Area Networks - Specific requirements Part 11 : Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications,” (IEEE Std. 802.11-2016), December 2016 [802. IAS] Information technology— Telecommunications and information exchange between systems— Local and metropolitan area networks— Part IAS: Timing and synchronization for time sensitive applications in bridged local area networks, Reference number ISO/IEC/IEEE 8802-1 AS:2014(E) [DH] Diffie, W.; Heilman, M. (1976), "New directions in cryptography", IEEE

Transactions on Information Theory, 22 (6): 644-654

[DPP] Device Provisioning Protocol - Technical Specification - Version 1.0, Wi-Fi

Alliance, 2018, https://www.wi-fi.org/file-member/device-provisioning-protocol- specification.

[NAN] Neighbor Awareness Networking - Technical Specification - Version 2.0, Wi

Fi Alliance, 2017, https://www.wi-fi.org/file-member/wi-fi-nan-technical-specification. [OTDOA] Sven Fischer, "Observed Time Difference Of Arrival (OTDOA) Positioning in 3 GPP LTE", Qualcomm Technologies, Inc., June 6, 2014.

[OWE] Opportunistic Wireless Encryption - Technical Specification - Version 1.0, Wi-Fi Alliance. 2018. https://www. wi-fi. org/file-member/opportunistic-wireless-encrvp tion- specification.

Claims

CLAIMS:

1. Device for distance measurement via wireless communication between the device acting as a first device (110) and a second device (120) for wireless communication, the wireless communication comprising a ranging protocol for determining a distance between the first and the second device based on an arrival time of a measurement message at the first device, the protocol comprising transmitting the measurement message by the second device;

the device comprising

- a first transceiver (111) for transmitting and receiving of messages,

- a first message processor (112) arranged for

- processing the messages according to the ranging protocol,

- determining a first distance (151) between the first device and the second device based on the first arrival time;

wherein the first message processor (112) is arranged for communicating with a third device (130), the third device acting as a cooperating device being located at a trusted distance (150) from the first device,

and

is arranged, for assessing the determined distance, to

- receive the support data from the cooperating device, the support data being based on a third arrival time of the first message at the cooperating device,

- obtain a third distance (153) between the third device and the second device using the support data, and

- perform a verification test on the first distance (151), the trusted distance (150) and the third distance (153), the verification test accepting the first distance as reliable when said distances correspond to a viable spatial constellation (100) of the first device, the second device and the cooperating device.

2. Device as claimed in claim 1, wherein the verification test comprises a cosine rule check or a triangle inequality check on the viable spatial constellation.

3. Device as claimed in claim 1 or 2, wherein the ranging protocol comprises exchanging messages that are cryptographically protected based on key data, and the first message processor (112) is arranged to share the key data with the cooperating device to enable the third message processor (132) to cryptographically process the messages according to the ranging protocol.

4. Device as claimed in any of the preceding claims, wherein the first message processor (112) is arranged to determine the trusted distance according to the ranging protocol.

5. Device as claimed in any of the preceding claims, wherein the device comprises a clock unit to provide a time reference for determining said arrival times, and the first message processor (112) is arranged to synchronize the time reference with a corresponding clock unit in the cooperating device.

6. Device as claimed in any of the preceding claims, wherein the ranging protocol comprises the first device, acting as an initiating device, sending an initiating message to the second device, while, upon receiving the initiating message, the second device has to send the measurement message, and the first message processor (112) is arranged

- to exchange role-change data with the third device to enable the third device to act as the initiating device for a distance measurement;

the third device being arranged, upon receiving the role-change data,

- to transfer third support data to the first device, the third support data being indicative of the third distance;

while the first message processor (112) is arranged

- to receive, from the third device, the third support data, and

- to perform the verification test also using the second distance and the third support data.

7. Device as claimed in any of the preceding claims, wherein the third message processor (132) is arranged to

- determine a third signal strength of at least one message received from the second device, and

- include third signal strength data in the support data to the first device; and

the first message processor (112) is arranged to

- determine a first signal strength of at least one message received from the second device, and

- to verify whether the determined distances are reliable by comparing the first signal strength and the third signal strength to respective expected signal strengths at the determined distances.

8. Device as claimed in any of the preceding claims, wherein the first message processor (112) is arranged, upon assessing that the determined distance is not reliable, to at least one of

- require executing a different security protocol with the second device;

- request a further distance measurement using a different ranging protocol and/or a different type of wireless communication;

- deny or restrict access to at least some data and/or to at least one function in the first device.

9. System for reliable distance measurement comprising the device as claimed in any of the preceding claims 1-8, the third device as defined in claim 1 and a fourth device acting as a second cooperating device being located at a second trusted distance from the first device or from the third device,

the fourth device comprising

- a fourth wireless receiver (141) for receiving of messages,

- a fourth message processor (142) arranged for

- determining a fourth arrival time of the measurement message at the fourth device, and

- transferring fourth support data to the first device, the fourth support data being based on the fourth arrival time;

wherein the first message processor (112) is arranged for

- receiving the fourth support data from the second cooperating device,

- obtaining a fourth distance between the fourth device and the second device using the fourth support data, and - to perform the verification test also using the second trusted distance and the fourth distance.

10. System as defined in claim 9, wherein the first message processor (112) is arranged

- to perform the verification test using a combination of a first triangle inequality on a first spatial constellation of the first device, the second device and the third device, and a second triangle inequality on a second spatial constellation of the first device, the second device and the fourth device; or

- to verify whether a first location of the second device according to the first spatial constellation corresponds to a second location of the second device according to the second spatial constellation; or

- to perform the verification test using an inconsistency check for detecting whether all of the determined distances are larger than zero; or

- to perform the verification test based on a setup wherein the third device and the fourth device are arranged so that a trusted angle between a line from third device to first device and a line from fourth device to first device is at least 90 degrees; or

- to perform the verification test based on a setup wherein the third device and the fourth device are arranged opposite to each other with respect to the first device; or

- to perform the verification test based on a setup wherein the second trusted distance corresponds to the trusted distance.

11. System as defined in claim 9 or 10, the system comprising at least one further device acting as a further cooperating device, wherein the third device, the fourth device and the at least one further device are arranged in a plane at the edges of a polygon, the first device being inside the polygon, wherein the first message processor (112) is arranged

- to perform the verification test using a combination of a triangle inequalities on at least two spatial constellations, each constellation comprising the second device and two devices of the set of the first device and the cooperating devices.

12. Method for distance measurement via wireless communication between a first device (110) and a second device (120),

the wireless communication comprising a ranging protocol for determining a distance (140) between the first and the second device based on an arrival time of a measurement message at the first device, the protocol comprising transmitting the measurement message by the second device;

the method comprising

- communicating with a third device (130), the third device acting as a cooperating device being located at a trusted distance from the first device,

the third device being arranged for

the method comprising, for assessing the determined distance,

13. Method as claimed in claim 12, wherein the method comprises

- instructing the first device to act as an initiating device to provide the first arrival time or the first distance, or

- instructing the third device to act as the cooperating device to provide the support data being based on the third arrival time.

14. Method for acting as a cooperating device in a distance measurement via wireless communication between a first device (110) and a second device (120),

the cooperating device being located at a trusted distance from the first device,

the wireless communication comprising a ranging protocol for determining a distance between the first and the second device based on an arrival time of a measurement message at the first device, the protocol comprising transmitting the measurement message by the second device;

the first device being arranged for

- obtaining a first distance between the first device and the second device based on a first arrival time of the measurement message at the first device, the method comprising

- determining a third arrival time of the measurement message at the cooperating device, and

the first device being arranged, for assessing the determined distance,

- to obtain a third distance between the cooperating device and the second device using the support data, and

- to perform a verification test on the first distance, the trusted distance and the third distance, the verification test accepting the first distance as reliable when said distances correspond to a viable spatial constellation of the first device, the second device and the cooperating device.

15. Computer program product downloadable from a network and/or stored on a computer-readable medium and/or microprocessor-executable medium, the product comprising program code instructions for implementing a method according to any one of claims 12 to 14 when executed on a computer.